Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/VIoe5vtniIMNu_oPEWff-lwSqrw.roa
File: VIoe5vtniIMNu_oPEWff-lwSqrw.roa (raw, json)
Hash identifier: 3k0VjZdIDMeiSnCUwM6+f+LSTU02mg7Bx1Owb60WuIE=
Subject key identifier: 54:8A:1E:E6:FB:67:88:83:0D:BB:FA:0F:11:67:DF:FA:5C:12:AA:BC
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019DAB456BC71B4E7043E151B19A1CA2F816
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/VIoe5vtniIMNu_oPEWff-lwSqrw.roa
Signing time: Mon 20 Apr 2026 14:22:26 +0000
ROA not before: Mon 20 Apr 2026 14:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63911
IP address blocks: 62.32.33.0/24 maxlen: 24
62.32.34.0/24 maxlen: 24
64.255.0.0/21 maxlen: 24
64.255.16.0/21 maxlen: 24
64.255.28.0/22 maxlen: 24
64.255.32.0/22 maxlen: 24
64.255.36.0/22 maxlen: 24
64.255.48.0/22 maxlen: 24
64.255.56.0/21 maxlen: 24
69.5.160.0/21 maxlen: 24
103.218.255.0/24 maxlen: 24
139.100.104.0/21 maxlen: 24
165.217.100.0/22 maxlen: 24
168.151.0.0/22 maxlen: 24
168.151.9.0/24 maxlen: 24
193.33.64.0/23 maxlen: 24
195.214.213.0/24 maxlen: 24
195.214.214.0/24 maxlen: 24
208.92.160.0/21 maxlen: 24
213.187.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:45:6b:c7:1b:4e:70:43:e1:51:b1:9a:1c:a2:f8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Apr 20 14:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=548a1ee6fb6788830dbbfa0f1167dffa5c12aabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:8d:15:0e:c7:66:a9:64:70:bd:4b:39:d0:
8a:46:66:72:a1:3e:f9:75:f8:50:7a:1b:30:df:36:
69:f4:ac:d3:61:b4:b0:60:f5:40:f6:51:48:9e:7f:
7a:95:d6:95:01:da:3e:fa:13:88:aa:f5:a0:84:8a:
26:ef:96:d6:53:43:35:a1:30:94:0c:c8:4b:70:1a:
7b:1f:4a:35:61:f7:78:00:c9:c8:aa:eb:79:e2:29:
c3:cb:c2:a6:0c:76:0c:e9:8b:b9:68:00:7d:c9:f8:
dc:62:7e:64:8f:65:46:51:d9:94:8d:a8:cc:7d:c5:
aa:8f:9e:01:47:18:da:d4:64:5c:b5:f5:cb:8f:ed:
db:bb:bb:46:4f:a9:e9:54:cd:b1:30:2e:60:93:62:
56:0d:6e:ff:26:9b:6c:57:eb:99:fc:5c:07:ae:72:
02:de:41:0d:19:5d:c1:02:e0:f6:74:ca:00:4c:d0:
fa:2f:ce:99:ff:3a:9e:c7:46:33:31:71:05:1e:8f:
42:50:62:0c:ba:3c:1b:1e:5c:59:e3:ef:75:de:d5:
d7:b4:d6:d4:77:c7:3d:fa:7c:e4:1d:f3:8a:6f:c0:
bd:b1:27:89:ab:f8:d2:af:5d:10:59:7e:22:70:c2:
b1:e5:c3:f4:7c:3c:9f:9e:3f:7d:bb:3b:1e:58:28:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:1E:E6:FB:67:88:83:0D:BB:FA:0F:11:67:DF:FA:5C:12:AA:BC
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/VIoe5vtniIMNu_oPEWff-lwSqrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.33.0-62.32.34.255
64.255.0.0/21
64.255.16.0/21
64.255.28.0-64.255.39.255
64.255.48.0/22
64.255.56.0/21
69.5.160.0/21
103.218.255.0/24
139.100.104.0/21
165.217.100.0/22
168.151.0.0/22
168.151.9.0/24
193.33.64.0/23
195.214.213.0-195.214.214.255
208.92.160.0/21
213.187.156.0/22
Signature Algorithm: sha256WithRSAEncryption
70:d5:3b:97:1c:62:d3:d2:94:4c:7f:42:53:91:f7:0c:d6:22:
48:8a:6b:d5:fd:30:6d:36:fc:d9:23:1a:f7:20:17:7a:d0:0c:
bb:6a:fa:b4:97:e2:4c:eb:e0:89:9d:50:d0:29:6c:61:19:72:
2f:52:bc:5c:04:cf:b2:e7:69:c2:1f:fc:1c:0a:56:db:29:44:
b4:55:79:83:13:ea:a8:c6:df:02:f4:38:0e:13:14:cc:e9:b1:
7e:91:5f:78:c6:ea:5c:95:66:4d:d7:69:40:8d:1e:db:50:2d:
ff:8d:a4:b0:fc:c9:0e:28:ba:03:44:dc:57:36:ab:86:07:1a:
09:bc:71:5b:d6:44:f6:6f:0e:b2:82:b9:f4:ff:18:4a:71:d4:
06:e6:60:26:f5:e2:96:38:ea:59:80:72:f5:ab:88:51:08:b7:
0e:7c:a1:d7:0f:55:eb:ae:44:78:a4:d6:a0:d1:57:da:10:a0:
2b:5c:02:b3:36:72:fa:e2:c0:5f:5f:51:a9:99:6d:21:93:b0:
b3:53:75:6b:24:6d:e3:05:74:9c:33:b7:1c:d6:8b:bb:46:ff:
10:0e:46:94:49:0d:25:b4:3c:1d:5c:9e:02:8e:00:7b:5c:b4:
95:21:52:a0:3e:a1:6e:e8:4a:3f:44:f8:8e:50:51:4a:e3:6e:
34:26:4f:ba
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZ2rRWvHG05wQ+FRsZocovgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjYwNDIwMTQyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDhhMWVlNmZiNjc4ODgzMGRiYmZhMGYxMTY3ZGZmYTVjMTJhYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7SNFQ7HZqlkcL1LOdCKRmZyoT75
dfhQehsw3zZp9KzTYbSwYPVA9lFInn96ldaVAdo++hOIqvWghIom75bWU0M1oTCU
DMhLcBp7H0o1Yfd4AMnIqut54inDy8KmDHYM6Yu5aAB9yfjcYn5kj2VGUdmUjajM
fcWqj54BRxja1GRctfXLj+3bu7tGT6npVM2xMC5gk2JWDW7/JptsV+uZ/FwHrnIC
3kENGV3BAuD2dMoATND6L86Z/zqex0YzMXEFHo9CUGIMujwbHlxZ4+913tXXtNbU
d8c9+nzkHfOKb8C9sSeJq/jSr10QWX4icMKx5cP0fDyfnj99uzseWCgSWQIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFFSKHub7Z4iDDbv6DxFn3/pcEqq8MB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvVklvZTV2dG5pSU1OdV9vUEVXZmYtbHdTcXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4MAwDBAA+
ICEDBAA+ICIDBANA/wADBANA/xAwDAMEAkD/HAMEA0D/IAMEAkD/MAMEA0D/OAME
A0UFoAMEAGfa/wMEA4tkaAMEAqXZZAMEAqiXAAMEAKiXCQMEAcEhQDAMAwQAw9bV
AwQAw9bWAwQD0FygAwQC1bucMA0GCSqGSIb3DQEBCwUAA4IBAQBw1TuXHGLT0pRM
f0JTkfcM1iJIimvV/TBtNvzZIxr3IBd60Ay7avq0l+JM6+CJnVDQKWxhGXIvUrxc
BM+y52nCH/wcClbbKUS0VXmDE+qoxt8C9DgOExTM6bF+kV94xupclWZN12lAjR7b
UC3/jaSw/MkOKLoDRNxXNquGBxoJvHFb1kT2bw6ygrn0/xhKcdQG5mAm9eKWOOpZ
gHL1q4hRCLcOfKHXD1XrrkR4pNag0VfaEKArXAKzNnL64sBfX1GpmW0hk7CzU3Vr
JG3jBXScM7cc1ou7Rv8QDkaUSQ0ltDwdXJ4CjgB7XLSVIVKgPqFu6Eo/RPiOUFFK
4240Jk+6
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:48 2026 by rpki-client